{"total":21,"rows":[{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2502.14881","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","created":"2025-02-14","cited_by_count":67,"area":"mllm"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2412.00114","title":"SceneTAP: Scene-Coherent Typographic Adversarial Planner against Vision-Language Models in Real-World Environments","created":"2024-11-28","cited_by_count":22,"area":"mllm"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2504.04893","title":"SCAM: A Real-World Typographic Robustness Evaluation for Multimodal Foundation Models","created":"2025-04-07","cited_by_count":13,"area":"mllm"},{"id":"2412.12722","title":"Defending LVLMs Against Vision Attacks through Partial-Perception Supervision","created":"2024-12-17","cited_by_count":7,"area":"mllm"},{"id":"2504.18053","title":"DREAM: Disentangling Risks to Enhance Safety Alignment in Multimodal Large Language Models","created":"2025-04-25","cited_by_count":6,"area":"mllm"},{"id":"2510.04257","title":"AgentTypo: Adaptive Typographic Prompt Injection Attacks against Black-box Multimodal Agents","created":"2025-10-05","cited_by_count":4,"area":"mllm"},{"id":"2601.17383","title":"Physical Prompt Injection Attacks on Large Vision-Language Models","created":"2026-01-24","cited_by_count":4,"area":"mllm"},{"id":"2603.27918","title":"Adversarial Attacks on Multimodal Large Language Models: A Comprehensive Survey","created":"2026-03-30","cited_by_count":4,"area":"mllm"},{"id":"2503.13652","title":"Web Artifact Attacks Disrupt Vision Language Models","created":"2025-03-17","cited_by_count":2,"area":"mllm"},{"id":"2507.11968","title":"Watch, Listen, Understand, Mislead: Tri-modal Adversarial Attacks on Short Videos for Content Appropriateness Evaluation","created":"2025-07-16","cited_by_count":2,"area":"mllm"},{"id":"2508.10955","title":"Empowering Multimodal LLMs with External Tools: A Comprehensive Survey","created":"2025-08-14","cited_by_count":2,"area":"mllm"},{"id":"2512.11899","title":"Read or Ignore? A Unified Benchmark for Typographic-Attack Robustness and Text Recognition in Vision-Language Models","created":"2025-12-10","cited_by_count":2,"area":"mllm"},{"id":"2608.13119","title":"QuISE: Defense against Typographic Attacks on VLMs via Query-Irrelevant Semantic Editing","created":"2026-08-13","cited_by_count":0,"area":"mllm"},{"id":"2609.05535","title":"Beyond the Verdict: Evidence-Aligned Evaluation of Visual Prompt-Injection Guardrails","created":"2026-09-02","cited_by_count":0,"area":"mllm"},{"id":"2609.31403","title":"Sorry Robot, Happy Human: Vision-Language Models Read Only One of Two Legible Typographic Layers","created":"2026-09-25","cited_by_count":0,"area":"mllm"},{"id":"2609.39662","title":"Typographic Attack Against VLM-based AI-generated Image Detection","created":"2026-09-30","cited_by_count":0,"area":"mllm"}],"next_cursor":null}